Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa
File:                     a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa (raw, json)
Hash identifier:          Vv6k56eVt14eo8dqUl7868ohhdRDs3O4K91DYLcCuDg=
Subject key identifier:   6E:FA:15:1A:81:48:03:C3:E3:89:5B:D4:13:16:0A:A2:50:B5:D5:FE
Certificate issuer:       /CN=aa31a4a0-7b77-4f56-8f89-01525b506129
Certificate serial:       010D0C9F4328584F655D8186F841F062FB9F7F80
Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     46687
IP address blocks:        64.82.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:81:86:f8:41:f0:62:fb:9f:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=4b8007d9-55ba-404a-8fa9-804a3f796167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:5c:a2:1f:d1:48:5e:25:08:aa:31:9e:75:
                    ab:8e:71:03:28:dd:76:b5:f0:9f:b2:00:0e:5d:1c:
                    11:39:b6:71:3c:0f:27:93:f5:ec:01:c9:29:55:0c:
                    10:98:dd:82:93:b4:bc:eb:d6:55:8d:e2:f6:0c:cc:
                    04:db:14:da:9f:7a:aa:3e:b0:32:79:78:70:6c:c0:
                    94:50:50:9c:d3:0f:a6:fc:7e:a6:97:ec:ac:35:2b:
                    41:de:de:8d:84:6f:8b:7e:04:25:67:a0:82:aa:5d:
                    9b:e1:15:34:1e:e8:c0:14:34:63:4e:04:11:ea:ae:
                    b2:7d:1a:83:56:fd:d5:64:da:81:78:59:6c:a3:68:
                    f7:29:d6:ad:85:c9:a7:49:95:97:66:e7:70:62:e6:
                    20:c1:56:d3:8a:ef:82:f8:6a:f1:51:76:74:3e:8a:
                    06:29:fd:fb:bb:b8:2a:78:0e:ec:e0:e6:ce:c6:0a:
                    f6:65:5d:80:9f:70:7e:f4:7f:44:8b:85:fc:93:11:
                    7c:27:ac:82:82:64:a2:7a:36:87:2f:8d:01:d5:13:
                    15:b5:99:99:f4:ab:6e:93:2d:12:de:96:72:44:ea:
                    03:4f:75:bf:6b:9d:b9:a3:27:88:6b:50:16:b5:ba:
                    8a:f9:9e:27:96:81:e7:77:b9:9c:f4:14:ff:5d:1e:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FA:15:1A:81:48:03:C3:E3:89:5B:D4:13:16:0A:A2:50:B5:D5:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl

            X509v3 Authority Key Identifier:
                keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.82.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:cd:e9:72:12:2e:e6:41:66:ef:6f:d0:91:ba:74:dc:c0:7c:
         95:3b:7e:10:b5:01:84:28:ef:11:08:b7:b1:46:f5:56:c9:dc:
         32:6b:92:e8:f2:62:57:8e:36:02:f2:a5:31:89:32:39:a7:52:
         d0:e5:c9:ce:0a:1d:79:52:c7:d4:a7:44:e1:43:2f:a3:53:5b:
         47:84:13:31:da:35:55:ef:19:9b:84:6c:cf:2d:ae:ed:f6:75:
         20:a8:d2:70:c8:4c:3c:07:b1:c5:c1:6b:40:08:3d:66:28:2c:
         e5:2b:59:75:1d:ba:77:a3:03:5c:25:9d:07:cb:9c:08:95:d3:
         5e:93:8e:f7:b7:7d:fa:b9:c7:f1:cd:a6:51:83:77:5c:b0:b3:
         28:6d:bf:6e:17:3a:08:3d:15:c5:5c:80:dd:73:fb:b8:8a:84:
         76:dc:71:29:8e:22:ab:1d:e2:ee:34:c4:d0:42:77:bc:6d:e9:
         37:fe:8e:20:12:75:9e:09:98:ef:0e:77:ab:ea:e6:1e:05:92:
         cf:93:82:4e:67:38:06:d0:7b:9d:af:89:1b:40:0b:b3:47:4e:
         32:26:6f:55:c6:40:51:26:ef:49:9a:a8:13:b9:d8:a3:08:fd:
         0a:34:6f:6c:56:ee:5d:d6:17:4a:94:49:35:8b:39:ff:c2:a8:
         d1:e7:8c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:15:09 2026 by rpki-client